Remove pdfminer.six version constraint, bump dependencies to address high severity CVEs (#4156)
<!-- CURSOR_SUMMARY -->
> [!NOTE]
> Security-focused dependency updates and alignment with new pdfminer
behavior.
>
> - Remove `pdfminer.six` constraint; bump `pdfminer-six` to `20251230`
and `urllib3` to `2.6.2` across requirement sets, plus assorted minor
dependency bumps
> - Update tests (`test_pdfminer_processing`) to reflect pdfminer’s
hidden OCR text handling; add clarifying docstring in `text_is_embedded`
> - Bump version to `0.18.25` and update `CHANGELOG.md`
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
04f70ee60d0eb7574fb79548fb9981949ccad207. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>